CVE-2013-4164

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before...

6.8 MediumFix available

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.

Exploit likelihood

35.0%Down 5.7 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2013-4164
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-4164
Updated: 2026-11-02

EUVDEUVD-2013-4089 No score

Record: EUVD-2013-4089
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j98q-m2w8-57rc No score

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before...

Record: GHSA-j98q-m2w8-57rc
Weakness: CWE-119
Updated: 2026-11-02

OSVMGASA-2014-0003 No score

Updated ruby package fixes security vulnerability

Charlie Somerville discovered that Ruby incorrectly handled floating point number conversion. An attacker could possibly use this issue with an application that converts text to floating point numbers to cause the application to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2013-4164).

Record: MGASA-2014-0003
Updated: 2026-11-02

OSVUBUNTU-CVE-2013-4164 No score

Record: UBUNTU-CVE-2013-4164
Updated: 2026-11-02

Affected products

ruby-lang ruby

Affected packages

Affected packages
Package	Affected	Fixed
`ruby1.8` Debian:6.0 From an advisory covering 3 CVEs	before 1.8.7.302-2squeeze2, plus listed versions 1.8.7.302-21.8.7.302-2squeeze1	1.8.7.302-2squeeze2
`ruby1.8` Debian:7 From an advisory covering 3 CVEs	before 1.8.7.358-7.1+deb7u1, plus listed versions 1.8.7.358-71.8.7.358-7.1	1.8.7.358-7.1+deb7u1
`ruby1.9.1` Debian:6.0	before 1.9.2.0-2+deb6u2, plus listed versions 1.9.2.0-21.9.2.0-2+armhf	1.9.2.0-2+deb6u2
`ruby1.9.1` Debian:7	before 1.9.3.194-8.1+deb7u2, plus listed versions 1.9.3.194-8.11.9.3.194-8.1+deb7u1	1.9.3.194-8.1+deb7u2
`ruby` Mageia:3	before 1.9.3.p484-1.mga3	1.9.3.p484-1.mga3
`ruby193-ruby` Red Hat:rhel_software_collections:1::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-debuginfo` Red Hat:rhel_software_collections:1::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-devel` Red Hat:rhel_software_collections:1::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-doc` Red Hat:rhel_software_collections:1::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-irb` Red Hat:rhel_software_collections:1::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6

Show 150 moreShow less

Affected packages
Package	Affected	Fixed
`ruby193-ruby-libs` Red Hat:rhel_software_collections:1::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-tcltk` Red Hat:rhel_software_collections:1::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-rubygem-bigdecimal` Red Hat:rhel_software_collections:1::el6	before 0:1.1.0-40.1.el6	0:1.1.0-40.1.el6
`ruby193-rubygem-io-console` Red Hat:rhel_software_collections:1::el6	before 0:0.3-40.1.el6	0:0.3-40.1.el6
`ruby193-rubygem-json` Red Hat:rhel_software_collections:1::el6	before 0:1.5.5-40.1.el6	0:1.5.5-40.1.el6
`ruby193-rubygem-minitest` Red Hat:rhel_software_collections:1::el6	before 0:2.5.1-40.1.el6	0:2.5.1-40.1.el6
`ruby193-rubygem-rake` Red Hat:rhel_software_collections:1::el6	before 0:0.9.2.2-40.1.el6	0:0.9.2.2-40.1.el6
`ruby193-rubygem-rdoc` Red Hat:rhel_software_collections:1::el6	before 0:3.9.5-40.1.el6	0:3.9.5-40.1.el6
`ruby193-rubygems` Red Hat:rhel_software_collections:1::el6	before 0:1.8.23-40.1.el6	0:1.8.23-40.1.el6
`ruby193-rubygems-devel` Red Hat:rhel_software_collections:1::el6	before 0:1.8.23-40.1.el6	0:1.8.23-40.1.el6
`ruby` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-devel` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-irb` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-libs` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-rdoc` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-docs` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-ri` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-static` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-tcltk` Red Hat:enterprise_linux:6::client	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-irb` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-libs` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-rdoc` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-docs` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-ri` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-static` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-tcltk` Red Hat:enterprise_linux:6::computenode	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-devel` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-irb` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-libs` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-rdoc` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-docs` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-ri` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-static` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-tcltk` Red Hat:enterprise_linux:6::server	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-irb` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-libs` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-rdoc` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-docs` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-ri` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-static` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby-tcltk` Red Hat:enterprise_linux:6::workstation	before 0:1.8.7.352-13.el6	0:1.8.7.352-13.el6
`ruby` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-debuginfo` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-irb` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-libs` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-debuginfo` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-devel` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-irb` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-libs` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-rdoc` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-debuginfo` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-devel` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-irb` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-libs` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-rdoc` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-devel` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-docs` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-rdoc` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-ri` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-static` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-tcltk` Red Hat:rhel_eus:6.2::computenode	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-docs` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-ri` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-static` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-tcltk` Red Hat:rhel_eus:6.3::computenode	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-docs` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-ri` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-static` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-tcltk` Red Hat:rhel_eus:6.4::computenode	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-debuginfo` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-devel` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-irb` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-libs` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-rdoc` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-debuginfo` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-devel` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-irb` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-libs` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-rdoc` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-debuginfo` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-devel` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-irb` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-libs` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-rdoc` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-docs` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-ri` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-static` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-tcltk` Red Hat:rhel_eus:6.2::server	before 0:1.8.7.352-13.el6_2	0:1.8.7.352-13.el6_2
`ruby-docs` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-ri` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-static` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-tcltk` Red Hat:rhel_eus:6.3::server	before 0:1.8.7.352-13.el6_3	0:1.8.7.352-13.el6_3
`ruby-docs` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-ri` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-static` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby-tcltk` Red Hat:rhel_eus:6.4::server	before 0:1.8.7.352-13.el6_4	0:1.8.7.352-13.el6_4
`ruby193-ruby` Red Hat:openstack:3::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-debuginfo` Red Hat:openstack:3::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-devel` Red Hat:openstack:3::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-doc` Red Hat:openstack:3::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-irb` Red Hat:openstack:3::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-libs` Red Hat:openstack:3::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-tcltk` Red Hat:openstack:3::el6	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-rubygem-bigdecimal` Red Hat:openstack:3::el6	before 0:1.1.0-40.1.el6	0:1.1.0-40.1.el6
`ruby193-rubygem-io-console` Red Hat:openstack:3::el6	before 0:0.3-40.1.el6	0:0.3-40.1.el6
`ruby193-rubygem-json` Red Hat:openstack:3::el6	before 0:1.5.5-40.1.el6	0:1.5.5-40.1.el6
`ruby193-rubygem-minitest` Red Hat:openstack:3::el6	before 0:2.5.1-40.1.el6	0:2.5.1-40.1.el6
`ruby193-rubygem-rake` Red Hat:openstack:3::el6	before 0:0.9.2.2-40.1.el6	0:0.9.2.2-40.1.el6
`cfme` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:5.2.2.3-1.el6cf	0:5.2.2.3-1.el6cf
`cfme-appliance` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:5.2.2.3-1.el6cf	0:5.2.2.3-1.el6cf
`cfme-debuginfo` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:5.2.2.3-1.el6cf	0:5.2.2.3-1.el6cf
`cfme-lib` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:5.2.2.3-1.el6cf	0:5.2.2.3-1.el6cf
`mingw32-cfme-host` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:5.2.2.3-1.el6cf	0:5.2.2.3-1.el6cf
`ruby193-ruby` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-debuginfo` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-devel` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-irb` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-libs` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-ruby-tcltk` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.9.3.448-40.1.el6	0:1.9.3.448-40.1.el6
`ruby193-rubygem-actionpack` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 1:3.2.13-5.el6cf	1:3.2.13-5.el6cf
`ruby193-rubygem-amq-protocol` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.9.2-3.el6cf	0:1.9.2-3.el6cf
`ruby193-rubygem-amq-protocol-doc` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.9.2-3.el6cf	0:1.9.2-3.el6cf
`ruby193-rubygem-bigdecimal` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.1.0-40.1.el6	0:1.1.0-40.1.el6
`ruby193-rubygem-bunny` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.0.7-1.el6cf	0:1.0.7-1.el6cf
`ruby193-rubygem-bunny-doc` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.0.7-1.el6cf	0:1.0.7-1.el6cf
`ruby193-rubygem-excon` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:0.31.0-1.el6cf	0:0.31.0-1.el6cf
`ruby193-rubygem-fog` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.19.0-1.el6cf	0:1.19.0-1.el6cf
`ruby193-rubygem-io-console` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:0.3-40.1.el6	0:0.3-40.1.el6
`ruby193-rubygem-linux_admin` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:0.7.0-1.el6cf	0:0.7.0-1.el6cf
`ruby193-rubygem-more_core_extensions` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.1.2-1.el6cf	0:1.1.2-1.el6cf
`ruby193-rubygem-nokogiri` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.5.6-3.el6cf	0:1.5.6-3.el6cf
`ruby193-rubygem-nokogiri-debuginfo` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.5.6-3.el6cf	0:1.5.6-3.el6cf
`ruby193-rubygems` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.8.23-40.1.el6	0:1.8.23-40.1.el6
`ruby193-rubygems-devel` Red Hat:cloudforms_managementengine:5::el6 From an advisory covering 5 CVEs	before 0:1.8.23-40.1.el6	0:1.8.23-40.1.el6
`ruby1.9.1` Ubuntu:14.04:LTS	before 1.9.3.448-1ubuntu2, plus listed versions 1.9.3.194-8.1ubuntu21.9.3.448-1ubuntu1	1.9.3.448-1ubuntu2
`ruby2.0` Ubuntu:14.04:LTS	before 2.0.0.343-1ubuntu1, plus listed versions 2.0.0.299-22.0.0.343-1	2.0.0.343-1ubuntu1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Ruby on Rails JSON Processor Floating Point Heap Overflow DoS	2013-11-22

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4164 is a medium vulnerability (CVSS 6.8) in Ruby-lang Ruby, published November 22, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 35.0%, the 98th percentile. Fixed in ruby1.9.1 1.9.2.0-2+deb6u2.

References

Show 54 moreShow less